Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-48985

net: mana: Fix race on per-CQ variable napi work_done

Critical9.8EPSS 0.59%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix race on per-CQ variable napi work_done After calling napi_complete_done(), the NAPIF_STATE_SCHED bit may be cleared, and another CPU can start napi thread and access per-CQ variable, cq->work_done. If the other thread (for example, from busy_poll) sets it to a value >= budget, this thread will continue to run when it should stop, and cause memory corruption and panic. To fix this issue, save the per-CQ work_done variable in a local variable before napi_complete_done(), so it won't be corrupted by a possible concurrent thread after napi_complete_done(). Also, add a flag bit to advertise to the NIC firmware: the NAPI work_done variable race is fixed, so the driver is able to reliably support features like busy_poll.

Scores

CVSS scores of CVE-2022-48985, by who scored it
Scored byCVSSScoreVector
LinuxCNA (assigner)3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1Medium4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.59% · top 52% of all CVEs (5 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Affected products

  • Linux · Linux

    • affected e1b5683ff62e7b328317aec08869495992053e9d – < fe50a9bbeb1f042e756c5cfa7708112c944368de
    • affected e1b5683ff62e7b328317aec08869495992053e9d – < 6740d8572ccd1bca50d8a1ca2bedc333f50ed5f3
    • affected e1b5683ff62e7b328317aec08869495992053e9d – < 18010ff776fa42340efc428b3ea6d19b3e7c7b21

  • Linux · Linux

    • affected 5.15
    • unaffected < 5.15
    • unaffected 5.15.83 – ≤ 5.15.*
    • unaffected 6.0.13 – ≤ 6.0.*
    • unaffected 6.1 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-48985 badge
[![CVE-2022-48985](https://trackcve.app/badge/CVE-2022-48985.svg)](https://trackcve.app/cve/CVE-2022-48985)

Record last updated .